Control #
D
3
.
4
Include AI vendor obligations in customer contracts
Ensure customer contracts specify AI vendor responsibilities, including data protection, training restrictions, geographic controls, and security requirements.
Evidence
We'll list specific evidence that demonstrates compliance with this control. Typically, this is screenshots, proof of a legal or operational policy, or product demonstrations.
Recommended actions
We'll recommend specific practices and actions for complying with this control.